$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer File: 70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer (raw, json) Hash identifier: vRi6feRVxI4k1W8QVoYCSYTVtjHWMamq+swPRN6/JUM= Subject key identifier: 70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5A7A24DBB00A47BC2658DA2104FEC3D3F57F7932 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft caRepository: rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 May 2026 23:44:35 +0000 Certificate not after: Sat 01 May 2027 23:49:35 +0000 Subordinate resources: IP: 103.215.60.0/23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7a:24:db:b0:0a:47:bc:26:58:da:21:04:fe:c3:d3:f5:7f:79:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 23:44:35 2026 GMT Not After : May 1 23:49:35 2027 GMT Subject: CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:10:92:4c:2a:5e:2a:99:b3:ff:a2:d1:a5: 09:86:76:90:8c:15:23:5a:e7:12:aa:fc:2a:59:b6: d4:ff:b6:7f:62:a6:81:6b:cb:c4:92:f0:2a:0e:fd: 79:11:00:a6:e9:4d:1a:65:1b:1d:62:7f:12:c2:b0: 4c:97:5a:ca:a1:2d:37:cb:6a:04:b5:98:ce:f0:58: 0d:cb:81:5f:eb:83:51:b7:ff:24:ac:8f:6a:26:fa: 54:25:f2:73:fb:db:ae:44:84:db:b8:bd:29:fd:f4: a4:5a:19:c3:d8:01:cc:5e:b0:55:fd:58:af:a7:2c: 42:d1:1f:30:ce:74:b7:2a:31:fb:cf:aa:b4:41:e8: a4:91:9f:d8:79:dc:e0:bf:5c:c4:cd:af:d2:5b:51: de:d0:ed:30:b5:ad:6a:3f:ff:8a:08:a6:31:20:70: f2:c1:63:10:ba:48:cc:e4:29:2a:ab:1b:3a:01:97: 9c:48:49:07:59:91:6e:d3:be:26:c9:5b:f5:7f:db: 28:2e:b5:f4:13:f8:98:26:a9:1d:59:76:c3:4c:79: b0:31:44:ca:97:76:a6:16:97:09:ba:8f:5f:99:a1: 38:e9:f1:95:30:44:c4:25:77:51:fb:bb:09:83:69: e8:94:7d:50:b2:b9:4b:1d:ae:73:5c:b2:6c:da:03: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.215.60.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:ac:d5:ab:75:1e:d8:6b:08:28:fd:b8:50:b2:61:e0:00:79: a5:11:b2:47:d2:88:ca:9e:7d:2d:b1:51:f6:bd:75:87:dc:61: 0d:f0:d8:50:b7:95:76:18:16:87:4e:48:5f:b9:54:a8:d8:94: b5:a0:26:00:24:a2:9d:0b:6d:ac:c3:73:bc:4e:4c:64:32:88: 21:a8:87:2a:e3:40:ea:fc:fe:47:71:af:40:f0:9e:db:8b:2d: 70:da:f7:3c:9f:5a:d1:54:58:56:46:9f:98:8e:de:45:e9:05: d5:7a:02:94:f2:97:5f:5c:76:6a:17:db:a2:7f:ad:0e:aa:42: 1c:88:15:50:f4:94:39:56:16:17:fb:14:a4:f0:3f:37:7f:68: 60:ca:32:10:17:c9:52:f8:52:c5:7d:11:ba:47:4c:a6:99:04: fa:17:a5:cd:0d:76:d9:c7:9f:af:7f:dc:e2:da:b0:4d:5a:84: c2:c3:5c:3d:68:54:12:cd:d6:6a:e4:88:87:4f:d9:bf:d9:8e: 93:bf:6c:2f:6b:56:5b:80:49:da:05:b2:28:1f:dd:c1:1a:18: 4c:3e:7d:4a:c8:32:79:1b:c8:6c:0b:47:7e:11:f3:c7:d9:03: a1:16:45:f1:fa:fb:d5:42:08:73:2d:82:a8:da:94:9f:a7:0b: 07:b1:47:af -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUWnok27AKR7wmWNohBP7D0/V/eTIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIzNDQzNVoX DTI3MDUwMTIzNDkzNVowMzExMC8GA1UEAxMoNzBCNTRFMzREQ0YwNzAxMjkwQjc5 MkU2RUEwQUU5MDA4QjIzNjRBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZGEJJMKl4qmbP/otGlCYZ2kIwVI1rnEqr8Klm21P+2f2KmgWvLxJLwKg79 eREApulNGmUbHWJ/EsKwTJdayqEtN8tqBLWYzvBYDcuBX+uDUbf/JKyPaib6VCXy c/vbrkSE27i9Kf30pFoZw9gBzF6wVf1Yr6csQtEfMM50tyox+8+qtEHopJGf2Hnc 4L9cxM2v0ltR3tDtMLWtaj//igimMSBw8sFjELpIzOQpKqsbOgGXnEhJB1mRbtO+ Jslb9X/bKC619BP4mCapHVl2w0x5sDFEypd2phaXCbqPX5mhOOnxlTBExCV3Ufu7 CYNp6JR9ULK5Sx2uc1yybNoDGjcCAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHC1TjTc8HASkLeS5uoK6QCLI2SoMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv LzA2MTZjMDRkLWQ5ZTAtNGMxZi04YTE0LWUyM2JmMjc0NDU5Mi8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wNjE2YzA0 ZC1kOWUwLTRjMWYtOGExNC1lMjNiZjI3NDQ1OTIvMC83MEI1NEUzNERDRjA3MDEy OTBCNzkyRTZFQTBBRTkwMDhCMjM2NEE4Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ9c8MA0GCSqGSIb3DQEBCwUAA4IBAQBKrNWrdR7Yawgo/bhQsmHgAHmlEbJH 0ojKnn0tsVH2vXWH3GEN8NhQt5V2GBaHTkhfuVSo2JS1oCYAJKKdC22sw3O8Tkxk MoghqIcq40Dq/P5Hca9A8J7biy1w2vc8n1rRVFhWRp+Yjt5F6QXVegKU8pdfXHZq F9uif60OqkIciBVQ9JQ5VhYX+xSk8D83f2hgyjIQF8lS+FLFfRG6R0ymmQT6F6XN DXbZx5+vf9zi2rBNWoTCw1w9aFQSzdZq5IiHT9m/2Y6Tv2wva1ZbgEnaBbIoH93B GhhMPn1KyDJ5G8hsC0d+EfPH2QOhFkXx+vvVQghzLYKo2pSfpwsHsUev -----END CERTIFICATE-----Generated at Tue May 12 22:32:20 2026 by rpki-client